Lucene search

Delower Security Vulnerabilities

cve

CVE-2024-22292

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.2.8.

6.5CVSS

5.8AI Score

0.0004EPSS

2024-01-31 06:15 PM

cve

CVE-2024-37539

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.3.0.

6.5CVSS

6.5AI Score

0.0004EPSS

2024-07-06 01:15 PM